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identifiers associated with [the] such user; 

c. storing, in a digital storage medium, a data^t pertinent to [the] such 
user, the data set including [the] such user's personal information and a representation 
of the physiological identifiers associated wWjthe] such user; and 

d. permitting a subject to mpuify information in the stored data set pertinent 
,to [the] such user only if (i) the sul5]ect provides a new set of physiological identifiers 
and (ii) it is deternuned, by^recourse to the stored data set, that there is a sufficient 
match between at lea^tone member in the new set and a corresponding member of the 
first set, so thaj/tfie subject is authenticated as [the] such user. 

2. (Arfiended) A method according to claim 1, further comprising obtaining from 
such^user such user's medical information [from the user], and wherein^e data set 
includes [the] such user's med ical information. 

. (Amended) A method according to claim 1, wherein the/^rst set of physiological 
identifiers includes the appearance of [the] such user's face. 

5. (Amended) A method according to claim 1, wherein the first set of physiological 
identifiers includes characteristics of utterances^f [the] such user. 

6. (Amended) A method according to clai?n 1, wherein the first set of physiological 
identifiers includes a fingerprint of [the ^such user. 

7. (Amended) A method according4o claim 1, wherein the first set of physiological 
identifiers includes the configuranon of an iris in an eye of [the] such user. 

. ^(Amended) A method according to claim 1, wherein the first set includes at least 
one member selected from the group consisting of a fingerprint of [the] such user and 




an the configuration of an iris in an^e of [the] such user and at least one member 
y ^selected from the group congi^ing of characteristics of utterances of [the] such user and 
the appearance of [tt>^such user's face. 

14 (Amend^) A method according to clrfim [9] 12, wherein the non-physiological 
identifier is provided in the course o^^ession, over a computer network, employing a 
user's public and private keys^ 

(Amended) A method accor iing to claim 1, further comprising: 
^^fy^ prompting each [a] user, on a perioc iic basis, to update the data set pertinent to [the] 
such user. 

16, (Amended) A method for Authenticating a user transaction, the method 
comprising: 

obtaining a test set of physiological identifiers from a subject purporting to be 
[the] a specific user; 

accessing information in the data set pertinent to the specific user stored in 
accordance with the method of dlaim 1; and 

determirung if there is a sufficient match between at least one member in the test 




set and a corresponding physio 
17. (Amended) A method foi 



ogical identifier represented in the data set. 
authenticating a user transaction, the method 



comprising: 

obtaining a test set of physiological identifiers from a subject purporting to be a 
specific user; 

accessing information in a first data set pertinent to the specific user stored in a 



registration data base, the data base containing information provided by multiple users 
in a separate data set for each user, each data set of a specific v^ser including (i) personal 
information^ of [a] the specific user , that has been establis the specific user, and 

(ii) a representation of a first set of physiological identifiers^ associated with the specific 
user , that has been provided by the specific user /the data base being maintained under 
conditions wherein modification by a subjec^^ information in a stored data set 
pertinent to the [subject] specific user i s permitted only if (i) the subject provides a new 
^set of physiological identifiers and^ii) it is determined, by recourse to the stored data 
set, that there is a sufficient rnatch between at least one member in the new set and a 
corresponding memberx)f the first set, so that the subject is authenticated as the specific 
user; and 

deterrnirung if there is a sufficient match between at least one member in the test 
set and^ corresponding physiological identifier represented jl\ the data set 




mended) A digital storage medium on which h^ been recorded a multi-user 
\9 ^^rsonal information data base, the data base cojar^rising, for each specific user, a data 
set pertinent to [such] the specific user, thg^ata set including: 

(a) [such] the specific usej^personal information obtained from the specific 

user; 

(b) a represepfation of a first set of physiological identifiers associated with 
the specific user;^d 

(c) /^[such] the specific user's emergency information obtained from the 




specific user; 



the storage medium being maintained under conditions wherein modification by a 
subject of information in a stored datji^s^Cpertinent to the specific user is permitted only 
if (i) the subject provides a xxe^vseTof physiological identifiers and (ii) it is determined, 
by recourse to the-stored^ata set, that there is a sufficient match between at least one 






membeHri the new set and a corresponding member of the first set, so that the subject 
is authenticated as the specific user. 

Amended) A system for authe r\ticating transactions, the system comprising: 



a. a multi-user personal 
each specific user, a data set pertine 





information data base, the data base comprising, for 
t to [such] the specific user, the data set including: 

(i) [such user's] personal informatio n, of the specific user, that has 
been [obtained] established by [from] the specific user; 

(ii) a_representatipn of a first set of physiological identifiers^ associated 
with the specific user , that has been provided by the specific user; 

the data base being maintained xxnder conditions wherein modification by a subject of 
information in a stored data set pertinent to the specific user is permitted only if (i) the 
subject provides a new set of physiological identifiers and (ii) it is determined, by 
recourse to the stored data set,/that there is a sufficient match between at least one 
member in the new set and a corresponding member of the first set, so that the subject 
is authenticated as the specific user; 

b. a multiplicity ofi remotely distributed terminals in commimication with 
the data base, each terminal iicluding a physiological identifier transducer and a 
communication link with a merchant; and 
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